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Abstract 

This work studies the achievable secure rate per source-destination pair in wireless networks. First, a path loss model is 
considered, where the legitimate and eavesdropper nodes are assumed to be placed according to Poisson point processes with 
intensities A and A e , respectively. It is shown that, as long as A e /A = o ((logn)~ 2 ), almost all of the nodes achieve a perfectly 
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secure rate of \~Jn) f° r tne exten ded and dense network models. Therefore, under these assumptions, securing the network 
| does not entail a loss in the per-node throughput. The achievability argument is based on a novel multi-hop forwarding scheme 

where randomization is added in every hop to ensure maximal ambiguity at the eavesdropper(s). Secondly, an ergodic fading 
model with n source-destination pairs and n e eavesdroppers is considered. Employing the ergodic interference alignment scheme 
with an appropriate secrecy pre-coding, each user is shown to achieve a constant positive secret rate for sufficiently large n. 
Remarkably, the scheme does not require eavesdropper CSI (only the statistical knowledge is assumed) and the secure throughput 
per node increases as we add more legitimate users to the network in this setting. Finally, the effect of eavesdropper collusion on 
the performance of the proposed schemes is characterized. 

I. Introduction 

' J , A. Background 

In their seminal work [ 1 1 Gupta and Kumar have shown that the randomly located nodes can achieve at most a rate that 
l— ~~ '■ scales like -4=, as the number of nodes n — > oo, under an interference-limited channel model. However, the proposed multi-hop 
, scheme of Cl only achieves a scaling of ^ n j= = per node. This gap was recently closed in Q, where the authors proposed 
^ \ a highway based multi-hop forwarding protocol that achieves -4= rate per source-destination pair in random networks. In 
£^ ■ this approach, a set of connected highways, which span the network both horizontally and vertically, are constructed. Then, 
qq \ each source-destination pair communicates via a time-division strategy, where the source first transmits its message to the 

■ closest horizontal highway. Then, the message is transported in multi-hop fashion to the appropriate vertical highway, which 
\ carries the message as close to the destination as possible. Finally, the message is delivered to the destination node from 

f-*) ■ the vertical highway. The existence of highways, which satisfy certain desirable properties, is established by borrowing tools 
Q\ | from percolation theory. Contrary to this multi-hop approach, a single-hop scheme called as ergodic interference alignment J3] 

■ (see also Q], 0) is recently employed in [6| and, with arbitrary node placement and arbitrary traffic pattern, the unicast and 
\ multicast capacity regions of dense networks are characterized (up to a factor of logn) under the Gaussian fading channel 

• '-J ■ model. These line of works assumed an interference-limited channel model, where the interference is considered as noise (the 
r> | focus of this work as well). Contrary to this model, Q considered Gaussian fading channel model and proposed hierarchical 
. cooperation schemes that can increase the per-node rate. This approach is further improved in the follow-up works (see, e.g., 
|H), 13, and references therein). 

The broadcast nature of the wireless communication makes it susceptible to eavesdropping. This motivates considering 
secrecy as a quality of service (QoS) constraint that must be accounted for in the network design. State of the art crypto- 
graphic approaches can be broadly classified into public -key and private-key protocols. Public-key cryptography assumes that 
the eavesdropper(s) has limited computational power, whereas the decryption requires a significant complexity without the 
knowledge of the key (TO]. Private -key approaches, on the other hand, assume that a random key is shared in private between 
the legitimate transmitter and receiver. This key is used to secure the transmitted information from potential eavesdropper(s). 
One of the earliest examples of private-key cryptography is the Vernam's one time pad scheme ifTTI . where the transmitter 
sends the XOR of the message bits and key bits. The legitimate receiver can decode the messages by XORing the shared key 
with the received sequence. In |JT2 1, Shannon showed that this scheme achieves perfect secrecy if and only if the two nodes 
share a key of the same length as the message. The scaling laws of wireless networks under the assumption of pre-distributed 
private keys was studied in lfl3l . However, it is important to note that, the key agreement step of the cryptographic protocols is 
arguably the most challenging part and this step becomes even more daunting as the network size grows. Our work avoids the 
aforementioned limitations by adopting an information theoretic framework for secrecy in wireless networks. In particular, we 
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assume the presence of eavesdropper(s) with infinite computational power and characterize the scaling laws of the network 
secrecy capacity while relaxing the idealistic assumption of pre-distributed keys. 

The notion of information theoretic secrecy was introduced by Shannon to study secure communication over point-to-point 
noiseless channels |[T2ll . This line of work was later extended by Wyner lfl4l to noisy channels. Wyner's degraded wiretap 
channel assumes that the eavesdropper channel is a degraded version of the one seen by the legitimate receiver. Under this 
assumption, Wyner showed that the advantage of the main channel over that of the eavesdropper, in terms the lower noise 
level, can be exploited to transmit secret bits using random binning codes. This keyless secrecy result was then extended to 
a more general (broadcast) model in |fl5l and to the Gaussian setting in [16|. Recently, there has been a renewed interest in 
wireless physical layer security (see, e.g., Special Issue on Information Theoretic Security, IEEE Trans. Inf. Theory, June 2008 
and references therein). The secrecy in stochastic networks is studied in [17|, where it is shown that even a small density of 
eavesdroppers has a drastic impact on the connectivity of the secrecy graph. Connectivity in stochastic networks with secrecy 
constraints is also studied in 1181 . [19|, where the node degree distribution is analyzed. However, according to the best of our 
knowledge, information theoretical analysis of secrecy capacity scaling in large wireless networks has not been studied in the 
literature before. 

B. Contributions 

This paper considers wireless networks with secrecy constraints. We study two different channel models: 1) Static path loss 
model, and 2) ergodic fading model. For the first model, we consider a stochastic node placement on a square region, where the 
legitimate nodes and eavesdroppers are distributed according to Poisson point processes with intensity A and A e , respectively. 
(For extended networks, the area of the region is n and A = 1; and, for dense networks, area of the region is 1 and A = n.) 
The path loss is modeled with a power loss exponent of a > 2. This model suits for the scenarios where the channel gains are 
mostly determined by path losses. In the second model, n source-destination pairs and n e eavesdroppers are considered, where 
the gain of each link is assumed to follow some fading process. (The assumptions on the fading processes will be clear in the 
next section. Here, we note that our model includes a large set of fading distributions.) Arguably, this model suits for (dense) 
networks in which the inter node distances have a negligible effect on the channel gains compared to that of the underlying 
fading processes. 

The results of this work can be summarized as follows. 

1) For the path loss model, we construct a "highway backbone" similar to Q. However, in addition to the interference 
constraint considered in Q, our backbone construction and multi-hop forwarding strategy are designed to ensure secrecy. 
More specifically, an edge can be used in the highway if and only if there is a legitimate node within the corresponding square 
of the edge and if there is no eavesdropper within a certain secrecy zone around the node. We show that the network still 
percolates in this dependent edge model, and many highway paths can be constructed. Here, in addition to the careful choice of 
the secrecy zone, our novel multi-hop strategy, which enforces the usage of an independent randomization at each hop, allows 
the legitimate nodes to create an advantage over the eavesdroppers, which is, then, exploited to transmit secure bits over the 
highways. This way, we show that, as long as A e /A = o ((logn)~ 2 ), almost all source-destination pairs achieve a secure rate 

of ft (~^) with high probability, implying that the secrecy constraint does not entail a loss in the per-node throughput (in 
terms of the scaling). (Note that A = 1 for extended networks and A = n for dense networks.) In these scenarios, the proposed 
scheme, which uses independent randomization at the transmitter of each hop, is the crucial step to obtain the results. 

2) For the ergodic fading model, employing the ergodic interference alignment scheme (Q, Q), 0) with an appropriate 
secrecy pre-coding we show that each user can achieve secrecy. Here, the secrecy rate per user is shown to be positive for most 
of the relevant fading distributions. In particular, in the high SNR regime, the proposed scheme allows each user to achieve a 
secure degrees of freedom of 77 = [i — i] + even with the absence of eavesdropper CSI. We observe that, per node performance 
of users increase as we add more legitimate users in the network for this scenario compared to the result obtained for the path 
loss model. 

3) Finally, we focus on the eavesdropper collusion, where the eavesdroppers are assumed to share their observations freely. 
For the extended networks with the path loss model, the same scaling result is shown to hold for the colluding eavesdropper 
scenario when A e = O ((log n) -2 ( 1+p )) for any p > 0. For the ergodic fading model, extensions to many eavesdropper 
collusion scenarios are discussed. In the extreme case, where all the eavesdroppers collude, it is shown that the proposed 
scheme allows each user to achieve a secure degrees of freedom of 77 = [| — ^ ] + - We note that, for the path loss model 
under the stated assumptions, the eavesdropper collusion does not affect the performance of our multi-hop scheme (in terms 
of scaling). On the contrary, for the ergodic fading model, the eavesdropper collusion has a clear effect on the achievable 
performance of our ergodic interference alignment scheme. 

C. Organization 

The rest of this paper is organized as follows. Section HI] introduces the two network models (path loss and ergodic fading 
models). In Section [TTTJ we consider the path loss model and develop our novel multi-hop secret encoding scheme. Section HVl 
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focuses on the ergodic fading scenario and proposes ergodic interference alignment scheme for security applications. In 
Section [V] we focus on the colluding eavesdropper scenarios. Concluding remarks are given in Section IVI1 and, to enhance 
the flow of the paper, some of technical lemmas and proofs are relegated to the Appendix. 

II. Network Models 

The set of legitimate nodes is denoted by £, whereas the set of eavesdroppers is represented by £ . During time slot t, the 
set of transmitting nodes are denoted by T(t) C C, where each transmitting user i £ T(t) transmits the signal Xi(t). The 
received signals at receiving node j e C — Tit) and at eavesdropper e G £ are denoted by Yj(t) and Y e (t), respectively: 

Yj(t) = M*)*<(*) + C 1 ) 

Y e (t) = K e {t)X t {t) + Z e {t), (2) 

ier(t) 

where receivers are impaired by zero-mean circularly symmetric complex Gaussian noises with variance Nq. We denote this 
distribution by CAf (0, No). Assuming that each transmitter is active over N channel uses, the average power constraint on 

N 

channel inputs at each transmitter is given 

by W E l^i(*)| 2 < p - Note that < for iid - c -^(0, P) input distribution, SNR = 

t=i 

is the signal-to-noise ratio per complex symbol. 

A. Static Path Loss Model with Stochastic Node Distribution 

In the path loss model we consider, the signal power decays with the distance d as d~ a for some a > 2; and the distance 
between node i and node j is denoted by dij. The path loss is modeled in (Q]) and (f2]i with 

The set of all observations at eavesdropper e is denoted by Y e = {Y e (t), Vf}. 

The extended network model is a square of side-length y/n (the area of the region is n). The legitimate nodes and 
eavesdroppers are assumed to be placed randomly according to Poisson point processes of intensity A = 1 and A e , respectively. 
The transmitters are assumed to know a-priori whether there is any eavesdropper within some neighborhood or not (the size of 
the neighborhood will be clear in later parts of the text). We are aware of the idealistic nature of this assumption, but believe 
that it allows for extracting valuable insights in the problem. To analyze the worst case scenario from a security perspective, the 
legitimate receivers are assumed to consider interference as noise, whereas no such assumption is made on the eavesdroppers, 
all of which are assumed to be informed with the network topology perfectly. 

Now, consider any random source-destination pair, where the source s wishes to transmit the message W s ,d securely to the 
intended destination d. In our multi-hop strategy, each transmission consists of N channel uses per hop. We say that the secret 
rate of R is achievable for almost all the source-destination pairs (s, d), if 

• The error probability of decoding the intended message at the intended receiver can be made arbitrarily small as N — > oo, 
and 

• The information leakage rate associated with the transmissions of the message over the entire path, i.e., I ^ Ws ^- Y "^ can 
be made arbitrarily small Ve E £ as N — > oo, 

for almost all (s,d). 

If there are H hops carrying the message W„ i, one only needs to consider the associated channel observations at the 
eavesdropper when evaluating our security constraint. Hence, our second condition is satisfied if J l ff '- J ' Y 'W'"' ,^i(n)) can 
be made arbitrarily small for sufficiently large block lengths, where Y e (h) denotes the length- N channel output vector at 
eavesdropper e <G £ during hop h Q. 

To derive our asymptotic scaling results, we use the following probabilistic version of Landau's notation. We say f(n) — 
0(g(n)) w.h.p., if there exists a constant k such that 

lim Pr{/(n) < kg(n)} = 1. 

n~ ¥ oo 

We also say that f(n) — Q(g(n)) w.h.p., if w.h.p. g(n) = 0(f(n)). We denote f(n) = Q(g(n)), if f(n) — 0(g(n)) and 
f(n) = Q(g(n)). Lastly, we say f(n) = o(g(n)), if — > 0, as n — > oo. 

We also analyze a dense networks with the path foss model and stochastic node distribution similar to above, where we 
assume that the network is deployed on a square region of unit area. In this case, we assume that the legitimate nodes have 
an intensity of A = n. 

1 We note that the length of the observation vector Y e regarding message W s d is NH for H hops and N channel uses per hop. Therefore, to analyze 

the mutual information leakage rate per channel use one might be tempted to use J ^ 3,d ' Y<i ^^ — i Y e (-**)) m me secrecv constraint. However, as H hops 

carry the same message W 3: d, the overall information accumulation at the eavesdropper might be large even if ; ^': |l ' Y 'j||| — |Y '^ is made arbitrarily 
small. 
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B. Ergodic Fading Model 

Fading process for the link from i to k, denoted by hi t k(t), is assumed to be drawn i.i.d. across time according to some 
ergodic fading process. The ergodic fading is modeled in (fTJ and (O with the following two assumptions: 

• The channel gains for the legitimate users, hij, are assumed to be drawn from independent distributions (for each i,j 6 JC) 
that are symmetric around zero (that is Prj/i^.j = h} = Pr{hi j = —h}); and 

• The fading process for eavesdropper e 6 £, i.e., hi >e , is assumed to be drawn independently from the same distribution 
Vt G K. 

Note that, as we assume a certain distribution for any given transmitter-receiver pair, the location of the nodes are not relevant 
in this model. In addition, the second assumption on the fading processes ensures that each eavesdropper has statistically the 
same channel to each transmitter. 

We denote Y e 4 {Y e (l),~. , Y e (N)}, H(t) 4 {h id (t), Vt, j € K.}, H = {H(l),--- ,H(iV)}, H e (t) 4 {fc, e (t),Vt G 
/C, Ve G £}, and H e = {H e (l), ■ • • , H e (iV)}. Here, H is assumed to be known at legitimate users, whereas eavesdroppers 
are assumed to know both H and H e . 

We assume that each transmitter in the network has an arbitrary and distinct receiver and the set of legitimate nodes, i.e., 

C, consists of n source-destination pairs. For notational convenience, we enumerate each transmitter-receiver pair using an 
element of JC = {1, • • ■ , n}, and denote the channel gain process associated with transmitter-receiver pair i with hi t i(t). In 
this model, transmitter-receiver pair i 6 K tries to communicate a secret message Wi £ W,. Denoting the decoding error at 
the receiver by P e> i, we say that the secret rate Ri is achievable, if for any e > 0, 1) |Wj| > 2 NRi , 2) P e ^ < e, and 3) 
■hl(Wf, Y e , H, H e ) < e, Ve G £ , for sufficiently large N. We finally say that the symmetric secure degrees of freedom (DoF) 
(per orthogonal dimension) of rj is achievable, if the rate is achievable for pair i G JC and 

V< I™ , /^L^ .VieAC. (4) 
' - SNR^oo log(SNR) 

III. The Path Loss Model 

In this section, we first focus on extended networks with a path loss model (a > 2) and stochastic node distribution (Poisson 
point processes) as detailed in Section Hl-AI Our achievability argument is divided into the following four key steps: 

1) Lemma Q] uses the idea of secrecy zone to guarantee the secrecy of the communication over a single hop. 

2) In Lemma |2] we introduce our novel multi-hop forwarding strategy which uses independent randomization signal in each 
hop. This strategy is shown to allow for hiding the information from an eavesdropper which listens to the transmissions 
over all hops. 

3) Using tools from percolation theory, we show the existence of a sufficient number of horizontal and vertical highways 
in Lemma [3j and we characterize the rate assigned to each node on the highway in Lemma [4] 

4) The accessibility of highways for almost all the nodes in the networks with the appropriate rates is established in 
Lemma |5] 

Our main result, i.e., Theorem [6] is then proved by combining the aforementioned steps with a multi-hop routing scheme 
(Fig. 1). 

We partition the network area into squares of constant side length c. We further divide the area into larger squares of 
side ftdc, each of which contains (/*d) 2 small squares. These small squares take turn over a Time-Division-Multiple-Access 
(TDMA) frame of size {ftd) 2 slots. In each slot, a transmitter within each active small square can transmit to a receiver 
that is located at most d squares away as illustrated in Fig. 2. On the same figure, we also show the secrecy zone, around a 
transmitting square, consisting of squares that are at most f e d squares away. Our first result establishes an achievable secure 
rate per a single hop, active over N channel uses, under the assumption of a single eavesdropper on the boundary of the 
secrecy zone. 

Lemma 1 (Secure Rate per Hop): In a communication scenario depicted in Fig. 2, the secure rate, simultaneously achievable 
between any active transmitter-receiver pair is: 

R ™ = 77^2 + SNR Tfl ) - log(l + SNR^)] , (5) 

Ut«J 



where 



SNR — P(d+l)- a c- a (V2)- a ( „ 



oo 



S(a) 4 > *(z-0.5)- Q , (7) 



sM7 ^ ni.r^i-c-' (8) 

/, > (9) 
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and 

(d + l) a (V2) a 



1 + ^-8(f t )- a d- a c- a S(a) 



< (feT- (10) 



SNR - ^ + EPg ' 



Here, secrecy is guaranteed assuming the presence of an eavesdropper on the boundary of the secrecy zone. 

Proof: In Fig. 2, consider that one node per filled square is transmitting. Assuming that there is a transmission from every 
such square, we denote the interference set seen by our designated legitimate receiver as X. Since the legitimate receivers 
simply consider other transmissions as noise in our model, we obtain the following SNR at the legitimate receiver. 

Pd~ a 

% 

iei 

where the distance between the transmitter and receiver is denoted as cLtr and that between interferer i 6 1 and our receiver 
is denoted by dm. 

We now consider an eavesdropper e € £ listening to the transmission and upper bound its received SNR by the following. 

Pd a 

SNR e < -jp-, (12) 

where the distance between the transmitter and the eavesdropper e is denoted by dx e - Here, the upper bound follows by 
eliminating the interference at the eavesdropper. The construction in Fig. 2 allows for showing that 

d TR < (d+ l)o/2, (13) 
d Te > fedc, (14) 

OO 

(a) 00 

< 8(f t dc)- a Y / ^^-o-5y a 

1=1 

= 8(f t dc)- a S(a), (15) 
f t d>2(d+l), (16) 

OO 

^5^-0.5)"", (17) 

i=i 



and 



where (a) follows by choosing 

and the last equality follows by defining 



which converges to some finite value as a > 2. 

Using (O, CHk CG]l in CD} and (ITU , we obtain the followings. 



SNR >SNR a P(d+l)- a c-°(y^2)-° 

SNR™ > SNR™ = + p8{ft) - ad - ac - as{a) , (18) 



and 



P(fe)- a d- a C- a 



SNR e < SNR e * = ' Ar — . (19) 



Hence, SNR^i? > SNR e for every eavesdropper e, once we choose f e such that 

{d+ ^l)f 1)a I 1 + §- o 8(ft)- a d- a c- a S(a)^ < {feT- (20) 

We then construct the secrecy codebook at the transmitter by considering an eavesdropper that observes the signals of the 
transmission of this hop only with an SNR of SNR e ». Based on the Gaussian wiretap channel capacity lfl6l . one can easily 
show that the following perfectly secure rate is achievable 

R ™ = 77^2 M 1 + SNRta) - log(l + SNR7)] , (21) 

{ftdy 

where the {ftd) 2 term is due to time-division described above. ■ 
Next we introduce our novel multi-hop randomization strategy which ensures secrecy over the entire path, from a source to 
a destination node, at every eavesdropper observing all transmissions. 
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Lemma 2 (Securing a Multi-Hop Path): Securing each hop from an eavesdropper that is located on the boundary of the 
secrecy zone is sufficient to ensure secrecy from any eavesdropper which listens the transmissions from all the hops and lie 
outside the secrecy zones of transmitters of hops. 

Proof: We consider a source s, a destination d, and an eavesdropper e in the network. Without loss of generality, we 
assume that the multi-hop scheme uses H hops to route the message. We design the secrecy codebook at each transmitter 
according to highest possible eavesdropper SNR assumption for each hop. In our multi-hop routing scenario, each code of the 
ensemble at the transmitter of hop i generates 2 N ( Ri+R * codewords each entry with i.i.d. CM(0,P), for some e\ > 0, 
and distributes them into bins. Each codeword is, therefore, represented with the tuple (w Sld ,wf), where w s<d is the bin 
index (secret message) and wf is the codeword index (randomization message). To transmit the message w Syd , the encoder of 
transmitter i will randomly choose a codeword within the bin w Sid according to a uniform distribution. This codeword, i.e., 
X-i(w 8) d,wf), is sent from transmitter i. It is clear now that each transmitter on the path adds independent randomness, i.e., 
the codeword index wf is independent of Wj for i ^ j. 

We consider an eavesdropper at the boundary of the secrecy zone around the transmitter of the hop i, and denote it by 
e*. We subtract all the interference seen by this virtual node and denote its observations for hop i as Y e ». Omitting the 
indices {w Std , wf), for simplicity, we denote the symbols transmitted from the transmitter i as X;; and set Rf = I(Xi\ Y e *) = 
log (l + SNR e *). (Note that this is the rate loss in We continue as below. 

= 7(W M ;Y e (l),--- ,Y e {H)) 



SNR e 

I(W s<d ;Y e ) 



(a) 
< 



(b) 
< 



(<:■) 



I(W s4 ,W?,- 



,Y e .J-/(WT,--- ,W£;Y eI ,.-. ,Y e . H \W s4 ) 



/(Xx,-.. 
/(Xl 



H 



Y e *,- 



H 

E 

i=l 



Xff ; Y e * Y e 



H(Wf,-~ ,WZ\W,, d )+H(Wf,- 
,Y . )-H{Wf,— ,Wf) 



Wfj\Y e 



,Y e . ,W a , d ) 



H 



J2H(W?\W Sid ,Y e *,--- ,Y Bjr ,Wf 



H 

E 



/(X i; Y e .|Y e .,.-. ,Y et _ i ) + I(X 1 , 



' • 5 Xj_l, Xj-|_l , 



i Xff ; Y e * |Y e * , • • • , Y e *_ i , Xj) 



NR? + N-j + E{W* | Y e . , W s , d ) 



(d) 
< 



(e) 
< 



H(Yej | Y e . , • • • , Y e ._J - H (Y eJ | Y e . , • • • , Y e ._ 1 , X,) - 7Vi?f + TV 



H(Y eT ) - H(Y eT \Xi) - NRf + N 



(/) 
< 



E 

i=l 
H 

E 

i=l 

E 

i=l 

E 

N(e 1 +e 2 ), 



El + £2 

H 



ei + £2 



/(X^Ye^-iV^ + iV 



NliX^Y^-NRf + N 



ei + €2 
H 

ei + £2 



where (a) is due to the fact that Y e * is an enhanced set of observations compared to that of Y e (i), (b) is due to the data 
processing inequality and the Markov chain {W s ,d, Wf, • • • , Wfj} — > {Xi, • • • , X^f} — > {Y e * , • • • , Y^}, (c) follows since 
W a ,d and Wf are independent, (d) is due to fact that the second term in the sum is zero and due to Fano's inequality (as we 
choose Rf < I(Xi\Y e *), the binning codebook construction allows for decoding randomization message at the eavesdropper 
given the bin index for almost all codebooks in the ensemble): We define the decoding error probability as P e>e . = Pi{Wf £ 
Wf}, where Wf is the estimate of the randomization message Wf given (Y e f, W s ,d), and bound 



H(Wf\Y et , W s , d ) < N ( H{P ^ :) + Pe,e t Rf) < iv| 



(22) 



with some €2 — >• as N — > 00, (e) follows by the fact that conditioning does not increase the entropy and the observation that 

JV 

# (Y e . |Y e . , • • • , Y e| _ i , Xi) = H(Y el |X,), and (f) is due to the fact that /(X,; Y e . ) = £ /(X*; Y eJ (t)|Y e | (1), • • • , Y e . (t- 
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N 

1)) < E H(Y e *(t)) - Hty^Xitfi) = NI(Xi;Y eJ ). 
t=i 

After setting, e = t\ + €2, we obtain our result: For any given e > 0, I< - Ws ^ Y ^ < e a s N — > 00. ■ 
Note that, the number of hops scale as H = O(-Jn) and in d22t we have P e ,e* decays exponentially in N. Thus, we can 

say that the multi-hop transmissions require larger block lengths, as n gets large, to assure secrecy with this scheme. 

The following result uses tools from percolation theory to establish the existence of a sufficient number of secure highways 

in our network. 

Lemma 3 (Secure Highways): There exist a sufficient number of secure vertical and horizontal highways such that, as 
n — » 00, each secure highway is required to serve 0(y/n) nodes and an entry (exit) point has w.h.p. a distance of at most 
k' log n away from each source (respectively, destination) for some finite constant n' > 0, if c > cq for some finite constant 
c > and A e -> 0. 

Proof: We first describe the notion of secure highway and the percolation model we use in the proof. We note that most 
of this percolation based construction is developed in [2], [20] and here we generalize it for secrecy. We say that each square 
is "open" if the square has at least one legitimate node and there are no eavesdroppers in the secrecy zone around the square. 
We denote the probability of having at least one legitimate node in a square by p. It is evident that 

and hence, p can be made arbitrarily close to 1 by increasing c. For any given transmitting square, we denote the probability 
of having an eavesdropper-free secrecy zone by q. The number of eavesdroppers within a secrecy zone is a Poisson random 
variable with parameter X e (2f e d + l) 2 c 2 , and hence, 

= e -A e (2/„d+l) 2 c 2 _ 

Thus, q gets arbitrarily close to 1, as n —> 00, since A e — > with n (/ e , d, and c are some finite numbers for the highway 
construction). 

We then map this model to a discrete edge-percolation model (a.k.a. bond percolation on the random square grid lETl ) 
by drawing horizontal and vertical edges over the open squares, where an edge is called open if the corresponding square is 
open (see Fig. 3). We are interested in characterizing (horizontal and vertical) open paths that span the network area. Such 
open paths are our horizontal and vertical highways. We only focus on horizontal highways for the rest of the section as the 
results hold, due to symmetry, for the vertical highways. We remark that, in our model, the status of edges are not statistically 
independent due to the presence of associated secrecy zones that intersect for successive squares. Notice that the status of two 
edges would be independent if their secrecy zones did not intersect, which happens if there were at least 2f e d squares between 
two edges. Therefore, this dependent scenario is referred to as finite-dependent model, as f e and d are some finite numbers. 
Due to Lemma [T2l given in Appendix [A] this dependent model stochastically dominates an independent model, in which edges 
are independently open with probability p', where p' can be made arbitrarily high if pq can be made arbitrarily high. This 
independent scenario can be constructed by following the steps provided in [22 1 . Therefore, after proving the percolation of 
the network with some desirable properties under the independence assumption, the network will also percolate with the same 
properties under the finite dependence model as both p and q can be made sufficiently large. 

Using the independent edge model, applying Lemma Q~3] given in Appendix [A] with edge openness probability of p', and 
noting the fact that m = ^7= (Fig. 3), we obtain the following: There are w.h.p. Q(i/n) horizontal paths, which, for any given 
k > 0, can be grouped into disjoint sets of \S log n\ highways that span a rectangle area of size (k log n — e) x %fn, for some 
S > 0, and some e —> as n — > 00 if p 1 is high enough. Then, the network area is sliced into slabs of side length w, chosen 
so that the number of slabs match with the number of highways in each rectangle. Then, each source (destination) in the zth 
horizontal (vertical) slab will access the corresponding highway (Fig. 4). This way, each highway is required to serve at most 
2wy/n nodes and an entry (exit) point has w.h.p. a distance of at most k' log n away from each source (respectively, destination) 
for some finite constant k' > 0. The former claim follows by an application of Chernoff bound, given in Lemma [141 and union 
bound (see [2, Lemma 2] or [20 Lemma 5.3.5] for details) and the latter incorporates the negligible horizontal distance (at 
most c\/2) in addition to the vertical distance, which scales as k log n. Finally, due to the statistical domination argument given 
above, these percolation results will also hold for our finite-dependent model, as pq can be made arbitrarily large as n — > 00. 
Formally, 3cq £ (0, 00) such that, for any c > cq, pq can be made sufficiently high if A e —> as n —> 00. This translates to 
high enough p' by Lemma [T2l which shows that the dependent model has the property given in Lemma [13] as well. ■ 

With the following lemma we conclude the discussion of highways. 

Lemma 4 (Rate per Node on the Highways): Each node on the constructed highways can transmit to their next hop at a 
constant secure rate. Furthermore, the number of nodes each highway serves is 0(y/n), and therefore each highway can w.h.p. 
carry a per-node secure throughput of fl (^^^j- 

Proof: The highways are constructed such that there is at least one legitimate node per square and there are no eavesdroppers 
within the secrecy zone around the squares of the highway. We choose one legitimate node per square as a member of the 
highway, and compute the rate that can be achieved with the multi-hop strategy. From Lemma Q] (with d= 1) and Lemma [2] 
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one can see that highways can carry data securely with a constant positive rate. As each highway carries the data for 0(y/n) 



nodes due to Lemma [3] the achievable rate per node on highways is 

Our final step is to show that almost all the nodes can access the highways simultaneously with high probability with a rate 
scaling higher than D, ■ 

Lemma 5 (Access Rate to Highways): Almost all source (destination) nodes can w.h.p. simultaneously transmit (receive) 



-2^ 



their messages to (from) highways with a secure rate of f2 ((logn)~ 3 "~ Q ), if A e = o ((log 

Proof: To calculate the rate of each node transmitting to the closest horizontal highway, we follow the same procedure 
given in the proof of Lemma [4] However, this time we choose d = k" log n in Lemma [TJ for some finite k" > 0, as the 
nodes within each transmitting squares need to transmit to a receiver at a distance of at most k" log n squares away (due to 
Lemma [3). (Here, we can choose smallest number k" > — making k" log n integer.) In addition, compared to Lemma [4] 
where only one node per square is transmitting, here all legitimate nodes within small squares should access the highways 
w.h.p., which is accomplished with a TDMA scheme. 

As d = n"\ogn — > oo, we see from (O, ([8j, © that a per-node rate of ft ((logn)~ 2 ~ a ) is achievable. Note that, to 
satisfy dTOb and thus (O, any choice of f e > y2 suffices as n — > oo. However, for this case, due to time division between 
nodes within squares this rate needs to be further modified. Again applying the Chernoff bound (Lemma [T4l i and the union 
bound one can show that there are w.h.p. O(logrt) legitimate nodes in each square (see Lemma 1] or ll20l Lemma 5.3.4] 
for details). Therefore, w.h.p. the secure rate f2 ((logn)~ 3 ~ Q ) is achievable to the associated highway from a source node, if 
there is no eavesdropper in the associated secrecy zone. Next, we show that this will happen with a very high probability if 
A e = o ((logn)~ 2 ) asymptotically (as n — ¥ oo). 

From Fig. 2, it is clear that the presence of an eavesdropper eliminates the possibility of secure access to a highway from 
a region of area A = (2f e d + l) 2 c 2 . We denote the total number of eavesdroppers in the network as \£\ (Poisson r.v. with 
parameter X e n), and the total number of legitimate users in the network as |£| (Poisson r.v. with parameter An = n). Let the 
total area in which the eavesdroppers make it impossible to reach a highway be Ag. Clearly, Ag < A\£\. Let us further denote 
the number of legitimate users in an area of A\£\ as l/^fl I- Then, using the Chebyshev inequality (please refer to Lemma [TBI 
in Appendix lAl. we obtain 

\£\ < (l + e)A e n, 

\C\ > (l-e)n, (23) 
|^| £ || < (l + e)A\£\, 

for any e £ (0, 1) with high probability (as n — > oo). We denote the fraction of users that can not transmit to highways due 
to eavesdroppers as F which can be upper bounded by 

|£^| (l + £ ) 2 (2/ e rf+l) 2 c 2 A e n 
" \C\ ~ (l-e)n 1 ; 

with high probability (as n — > oo). The first inequality follows since the eavesdroppers can have intersecting secrecy regions, 
the second inequality follows from ( 1231 . and the limit holds as d = k" log(n) and A e = o ((log7i)~ 2 ). This argument shows 
that almost all of the nodes are connected to the highways as n — > oo. 

Similar conclusion can be made for the final destination nodes: Any given destination node can w.h.p. receive data from the 
highways securely with a rate of £1 ((logn)~ 3 ~ a ). ■ 

Now we are ready to state our main result. 

Theorem 6: If the legitimate nodes have unit intensity (A = 1) and the eavesdroppers have an intensity of A e = o ((log ri)~ 2 ) 
in an extended network, almost all of the nodes can achieve a secure rate of il (un) w ^ t ' 1 n ^8 n probability. 

Proof: In our multi-hop routing scheme, each user has a dedicated route (due to the time division scheme described 
below) with each hop sending the message to the next hop over channel uses. The secrecy encoding at each transmitter is 
designed assuming an eavesdropper on the boundary of the secrecy zone and listening to this hop (observations of length N) 
only. This way, a transmitter can achieve the rate reported in Lemma [JJ Then, we can argue that this secrecy encoding scheme 
will ensure secrecy from an eavesdropper that listens to the transmissions of every hop due to Lemma [2] 

Now, the main result follows by Lemma|4]and Lemma|5Jby utilizing a time division approach. That is the total transmission 
time of the network is divided into four phases, as shown in Fig. 1. During the first phase, the sources that are not affected by 
eavesdroppers (i.e., almost all of them due to Lemma[5j will w.h.p. transmit their messages to the closest highway entry point. 
Then, the secret messages of all nodes are carried through the horizontal highways and then the vertical highways (Lemma 0). 
During the final phase, the messages are delivered from the highways to almost all of the destinations (Lemma |5j. Hence, by 
Lemma [4] and Lemma |5j as the secrecy rate scaling per node is limited by the transmissions on the highway, we can see that 
almost all of the nodes achieve a secure rate of fl (^j) with high probability. This concludes the proof. ■ 

Few remarks are now in order. 
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1) The expected number of legitimate nodes is n, whereas the expected number of eavesdroppers is n e — o(n(\ogn)~ 2 ) in 
this extended network. Note that n e satisfies n e — 0(n 1 ~ e ) for any e > 0, and hence network can endure eavesdroppers as 
long as total number of eavesdroppers scale slightly lower than that of legitimate nodes. 

2) Utilizing the upper bound of 1 1 1 for the capacity of wireless networks, we can see that Theorem [6] establishes the 
achievability of the same optimal scaling law with and without security constraints. It is worth noting that, in our model, 
the interference is considered as noise at the legitimate receivers. As shown in Q, more sophisticated cooperation strategies 
achieve the same throughput for the case of extended networks with a > 3. This leads to the conclusion that cooperation in 
the sense of [7| does not increase the secrecy capacity when a > 3 and A e = o ((logn)~ 2 ). 

3) A e = o(l) is tolerable if each node shares key only with the closest highway member. If each node can share a secret 
key with only the closest highway member, then the proposed scheme can be combined with a one-time pad scheme (see, 
e.g., ifTTI and lfl2l ) for accessing the highways, which results in the same scaling performance for any A e — > as n — > oo. 

4) Can network endure A e = o(l) without key sharing? Note that in our percolation theory result, we have chosen squares 
of side length c (edge length in the square lattice was cv2, see Fig. 3) satisfying c > Co to make pq sufficiently large in order 
to have p' > I for Lemma [13] We remark that for independent percolation with edge probability p' in a random grid, for any 
7 G (0, 1), 3p*("f) such that for p' > p*("f), the random grid contains a connected component of at least r yn 2 vertices (see, 
e.g., Il20l Theorem 3.2.2]). Thus, as long as A e = o(l), for some e',e* > 0, we can choose a very large, but constant, c (to 
make sure that pq is very close to 1) to have p' = 1 — e' > p* (1 — e*), which implies that there are w.h.p. (1 — e*)n 2 connected 
vertices. Therefore, we conjecture that, for any given e > and for A e = o(l), per-node secure throughput of Sl(\/y/n) is 
achievable for (1 — e) fraction of nodes (we conjecture that these are the nodes that have constant distances to highways). 

We now focus on the dense network scenario. The stochastic node distribution for this scenario can be modeled by assuming 
that the legitimate and eavesdropper nodes are distributed as Poisson point processes of intensities A = n and A e , respectively, 
over a square region of unit area. The proposed scheme in the previous section can be utilized for this topology and the same 
scaling result can be obtained for dense networks as formalized in the following corollary. 

Corollary 7: Under the stochastic modeling of node distribution (Poisson point processes) in a dense network (on a unit 
area region) with the path loss model (with a > 2), if the legitimate nodes have an intensity of A = n and the eavesdropper 
intensity satisfies ^ = o ((logn) -2 ), then almost all of the nodes can simultaneously achieve a secure rate of (un)- 

Proof: The claim can be proved by following the same steps of the proof of Theorem [6] with scaling the transmit power 
from P to r~|=p; at each transmitter, and scaling each distance parameter by dividing with y/n. Note that, with these scalings, 
signal to interference and noise ratio (SINR) calculations and percolation results remain unchanged. ■ 



We now focus on the ergodic fading model described in Section III-BI and utilize the ergodic interference alignment for 
secrecy. Frequency selective slow fading channels are studied in ll23l . where each symbol time t = 1, • • • , N corresponds to 
F frequency uses and the channel states of each sub-channel remain constant for a block of N' channel uses and i.i.d. among 
B blocks (N = N'B). For such a model, one can obtain the following high SNR result by utilizing the interference alignment 
scheme |4j. 

Theorem 8 (Theorem 3 of R23\l): For n source-destination pairs with n e number of external eavesdroppers, a secure DoF of 
r\ = [i — i] + per frequency-time slot is achievable at each user in the ergodic setting, in the absence of the eavesdropper 
CSI, for sufficiently high SNR, N, and F. 

This interference alignment scheme is shown to achieve a secure DoF of [§ - 2f] per orthogonal dimension at each user 
when all the eavesdroppers collude [24|. Remarkably, with this scheme, the network is secured against colluding eavesdroppers 
and only a statistical knowledge of the eavesdropper CSI is needed at the network users. However, the proposed scheme only 
establishes a high SNR result in terms of secure DoF per user. In addition, the stated DoF gain is achieved in the limit of 
large number of sub-channels, which is unrealistic in practice for large number of users, n. (The result is achieved when the 
design parameter m gets large, where F — Q(m n ) l23l . Il24l .) 

Providing secure transmission guarantees for users at any SNR with finite number of dimensions is of definite interest. In 
this section, we utilize the ergodic interference alignment scheme J3j to satisfy this quality of service (QoS) requirement at the 
expense of large coding delays. Ergodic interference alignment can be summarized as follows. Suppose that we can find some 
time indices in {1, • • • , N}, represented by ti,t 2 , - ■ ■ and their complements tx, i2> • • • > sucn ma t hi^(t m ) = hi i(t m ), Vi € JC, 
and hij(t m ) = —hij(t m ), Vi, j £ JC with i 7^ j, for m — 1, 2, • • • , N\. Now, consider that we sent the same codeword over 
the resulting channels, i.e., we set Xi{t m ) = Xi(t m ),\/m. Then, by adding the observations seen by destination i for these 
two time instance sequences, the effective channel can be represented as 



IV. The Ergodic Fading Model 



(25) 



whereas the eavesdropper e observes 




■n, 



(26) 
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for m = 1, 2, • • • ,Ni. Remarkably, while the interference is canceled for the legitimate users, it still exists for the eavesdropper, 
whose effective channel becomes multiple access channel with single input multiple output antennas (SIMO-MAC). By 
taking advantage of this phenomenon together with exploiting the ergodicity of the channel, secure transmission against 
each eavesdropper is made possible at each user for any SNR (depending on the underlying fading processes) as reported in 
the following theorem, which is the main result of this section. 
Theorem 9: For t = 1, 2, • • • , let 



Yi{t) 4 2h i , i {t)X i {t) + Zi(t) + Zi(t), 



(27) 



Y e (t) ±J2H ite (t)Xi{t) + Z e (t), 



(28) 



H i)6 (t) = [hi, e (t) h^ e {t)] T , and Z e (t) = [Z e (t) Z e (t)] T , where, Vi G K and Ve G £, Z t and Z e are i.i.d. as Z t and Z e , 



respectively; and hi 



Ri — 



Then, source destination pair i G K can achieve the secret rate 

, X n - Y e |H, H e )] 



lE[I(Xi;Yi\U)]- ^-E[I(X 1} 
2 In 



(29) 



on the average, where the expectations are over underlying fading processes. 

Proof: We first need to quantize the channel gains to have a finite set of possible matrices. (These steps are given in O 
and provided here for completeness.) Let e' > 0. Choose r > such that Pr{Uj j-fl/ijjl > r}} < e'. This will ensure a finite 
quantization set. For 7 > 0, the 7-quantization of h^j is the point among 7(Z + jZ) that is closest to h^j in Euclidean 
distance. The 7-quantization of channel gain matrix H(f) is denoted by H 7 (<), where each entry is 7-quantized. Thus, 7- 



quantized channel alphabet / H 1 has size satisfying (■^-) 
b = !,-■■ ,B = 

and the remaining elements are negatives of that of H 6 



The complement of the channel H 7 is denoted by H 



< \H-y\ < (^) 2 ™ 2 . We denote each channel type with 



for 



whose diagonal elements are the same as H 7 



7 - 



We next utilize strong typicality [25] to determine the number of channel uses for each type. Consider any i.i.d. sequence 
of quantized channel matrices H 7 (l), • • • , H 7 (iV). Such a sequence is called J-typical, if 

iV(Pr{HH -S)< #{H 7 |H 7 (1), • • ■ , H 7 (A0} < N(Pr{H b \ + S), (30) 



where #{.|.} operator gives the number of blocks of each type. The set of such strong typical sequences is denoted by A s 
By the strong law of large numbers, we choose sufficiently large TV to have Pr{yl^ W ' 1 } > 1 



(N) 



Assuming that the realized sequence of quantized channel gain matrices, i.e., H 7 (l), 



- e'. 

, H 7 (A r ), is (5-typical, we use the 



first N b = iV(Pr{H 7 } - S) channel uses for each channel type b. This causes a loss of at most 25NB channel uses out of N, 
which translates to a negligible rate loss. With again a negligible loss in the rate, we choose each Ni, as even. Note that the 
complement block of b is b, which lasts for — Nb channel uses, as Pr{H 7 } = Pr{H 7 }. 

We now describe the coding scheme, which can be viewed as an ergodic interference alignment coding scheme with a 
secrecy pre-coding. For each secrecy codebook in the ensemble of transmitter i, we generate 2 N ( Ri+R *> sequences each of 

B 

length 2 ' w h ere entries are chosen such that they satisfy the long term average power constraint of P. We assign each 

b=i 

codeword to 2 NRi bins each with 2 NRi codewords. Given Wi, transmitter randomly chooses a codeword in bin i according to 
the uniform distribution, which is denoted by X,(iUj,iuf), where wf is the randomization index to confuse the eavesdroppers. 
The codeword is then divided into B blocks each with a length of ^ symbols. The codeword of block b is denoted by 



1. 



4r} and is repeated during the last 4^ channel uses of the block b, i.e., X^(t) 



X b(Nb 
t V 2 



t), for 



{xt{t),t 

t = 1, • • • , 4^. The channel gains, additive noises, and the received symbols is denoted with the same block, i.e., channel 
type, notation. Here, the effective channels during block b is given by 



Y*(t) = 2hUi)X b l {t) + Z b l {t) + Z h l 



+ t 



and 



'N b 



N h 



z b e (t) 
zl(f + t) 



(31) 



(32) 



fort = 1,2,- •■ 

We essentially code over the above two fading channels seen by destinations and eavesdroppers. Here, to satisfy both the 
secrecy and the reliability constraints, we choose the rates as follows. 



Ri 

It, 



1 



E[I{Xi;Yi\H.)]-^-E[I{X lt -" ,X n ; Y e |H,H e )] - e 



2)i 



E[I{X 1 



2n 



, X n ; Y e |H, H e )], 



(33) 
(34) 
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where the expectation is over the ergodic channel fading, and the channel outputs and Y e are given by the transformations 
(|27l i and ( |28T l, respectively. 

For any e > 0, we choose sufficiently small S. Then, in the limit of N —> oo, r — > oo, 7 — >• 0, each legitimate receiver j 
can decode W% and with high probability (covering a-typical behavior of the channel sequence as well) as 



Ri+Rf = ±E[I(X i ;Y i \H)]-e, 

where e covers for quantization errors and unused portion of the channel uses. 

For the secrecy constraint we first consider each expression on the right hand side of the following equality. 



1 

N 



I(W K ;Y e ,U,U e ) 



1 

N 



I{W Kl W^Y e ,K,K e 



1 

N 



H{Wg\W K ,Y e ,H,H e 



N 



ff(W||W^,H,H e ), 



where we denote W K = {W^Vi G K} and Wfc = {W^Vi G K,}. 
We have 



1 

N 



/(Wc,W£;Y e ,H,H e 



1 

N 



7(W]c,W^;Y e |H > H e ) 



(35) 



(36) 



(a) 1 

< 



(b) 
< 



N i({x*(t),vi, b, ty {Y b e (t),vb, tyn, h 

B 

'B[J(Jfi s ... ,X n ;Y e |H ! H e )]-e 1 
E[I(X lt >>- ,X B ;Y e |H,H e )]-ei 



iV 

(c) (1 -e 2 ) 
2 

< ^[/(Xi,..- ,X n ;Y e |H,H e )] + eic 2 , 



(37) 
as 



where (a) is due to the coding scheme and the data processing inequality, (b) is due to ergodicity with some e% 
N — s- 00, (c) is due to unused portion of channel uses with some £2 as N —> 00. 

Secondly, due to the ergodicity and the symmetry among tranmitters, the rate assignment implies the following: The rates 
satisfy 



J2 R f< ^[J(*s;Y e |X x: _5,H,H e )] ) 



(38) 



for any S C K.. (Please refer to Lemma 8 of E3l for details.) Thus, the randomization indices Wf* can be decoded at the 
eavesdropper e given the bin indices Wjc- Then, utilizing Fano's inequality and averaging over the ensemble of the codebooks, 
we have 

1 

N~ 

with some £3 — > as N — > 00. 

Third, as is independent of {Wic, H, H e } and as each Wf is independent, we have 



;tf(W£|Wc,Y e ,H,H e )<e 3 , 



(39) 



jyH(Wjc\Wjc, H, H e ) = ±H(W£) = ^ = ^J2 NR * = • • • Y e |H, H e )] 



Finally, using d37l i. d39l ), and d40b in d36l l, we obtain 



N 



7(W K ;Y e ,H,H e ) < e, 



which implies that 



N 



J(Wi;Y e ,H,H e )<e,VieX: 



(40) 



(41) 



(42) 



with some e — !• as N — >• 00, which establishes the claim. ■ 
Note that for i.i.d. complex Gaussian input distribution, i.e., when Xi(t) ~ CAF(0, P),Vi,t, the proposed scheme achieves 

+ 



Ri 







2 


log ^ 



2P|fej,i| 
iV 









) 




log det ^ 




2n 





p 

No 



i=l 



(43) 
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for user i G JC. Here, for any non-degenerate fading distribution, e.g., Rayleigh fading where h^k 
JC U £, the second term of d43l ) diminishes as n gets large. In particular, as n —> oo, Ri scales as 



CAf(0,l),Vi G AC.Vfc G 













log( 


2 





iVo 



0(tog(n)) 



and hence we can say that each user can achieve at least a positive constant secure rate for any given SNR for sufficiently 
large n. (Please refer to Appendix iBl) 

To quantify the behavior of the scheme in the high SNR regime, we now focus on the achievable secure DoF per user, 
which can be characterized by dimension counting arguments. The proposed scheme achieves r\= \h — — ] + secure DoF per 
user for any given non-degenerate fading model. (This can be shown by dividing both sides of d43l l with log SNR and taking 
the limit SNR — > oo for any given n.) Note that the pre-log gain of the proposed scheme is the same as that of |23ll . But, 
remarkably, ergodic interference alignment allows us to attain secrecy at any SNR by only requiring a statistical knowledge 
of the eavesdropper CSI. We note that this gain is obtained at the expense of large coding delay (at least exponential in the 
number of users). 



V. Eavesdropper Collusion 

In a more powerful attack, eavesdroppers can collude, i.e., they can share their observations. Securing information in such 
a scenario will be an even more challenging task compared to non-colluding case [119], |26|. Interestingly, even with colluding 
eavesdroppers, we show that the scaling result for the path loss model remains the same with the proposed multi-hop scheme 
with almost the same eavesdropper intensity requirement. 

Theorem 10: If the legitimate nodes have unit intensity (A = 1) and the colluding eavesdroppers have an intensity of 
A e = O ((log?i)~ 2 ~ p ) for any p > in an extended network, almost all of the nodes can achieve a secure rate of Q 
under the static path loss channel model. 

Proof: Please refer to Appendix Icl ■ 

We note that, in the colluding eavesdropper scenario, the result requires only a slightly modified eavesdropper intensity 
condition compared to the non-colluding case. Also, for the highway construction of the non-colluding case, the secrecy zone 
with an area of (2df e + l) 2 c 2 with f e > a/2 was sufficient. However, for the colluding eavesdropper scenario, legitimate 
nodes need to know whether there is an eavesdropper or not within the first layer zone, which has an area of (2c?/; 1 + l) 2 c 2 
with /jj = 6' \og(n), where S' can be chosen arbitrarily small (see J62l). Hence, securing the network against colluding 
eavesdroppers requires more information regarding the eavesdroppers compared to the non-colluding case. But, remarkably, 
the optimal scaling law (see (2)) is achieved even when the eavesdroppers collude under these assumptions. 

For the ergodic fading model, the eavesdropper collusion decreases the achievable performance. Let us add independent 
observations to the received vector given in d28l > of Theorem [9] according to eavesdropper collusion and denote colluding 
eavesdroppers' observations by Y e * for e* G £* = {el, e* 2 , ■ ■ ■ }. For example, if e\ and e-i colludes, their cumulative 
observations is denoted by Y e » (SIMO-MAC with 4 receive antennas). In such a scenario, the proposed scheme can be used 
to achieve the following rate. 

Corollary 11: For a given eavesdropper collusion set £*, source-destination pair i G JC achieves the following rate with the 
proposed ergodic interference alignment scheme for the ergodic fading channel model: 



Ri = min 



~E[I(X i; Yl\H)] - ±E[I(Xi,..- ,X„;Y e *|H,H e )] 



(44) 



Note that the proposed scheme achieves rj = [| — 2a] + secure DoFs per user for non-degenerate fading distributions 
when all the eavesdroppers collude. (This can be shown from d44l by setting £* = £, choosing the input distribution as 
i.i.d. CAf(Q, P), dividing both sides by log SNR, and taking the limit SNR — » oo for any given n e and n.) 



VI. Conclusion 

In this work, we studied the scaling behavior of the capacity of wireless networks under secrecy constraints. For extended 
networks with the path loss model (the exponent is assumed to satisfy a > 2), the legitimate nodes and eavesdroppers were 
assumed to be randomly placed in the network according to Poisson point processes of intensity A = 1 and A e , respectively. 
It is shown that, when X e — o ((logn)~ 2 ), almost all of the nodes achieve a secure rate of Q f^)> showing that securing 
the transmissions does not entail a loss in the per-node throughput for our model, where transmissions from other users are 
considered as noise at receivers. Our achievability argument is based on novel secure multi-hop forwarding strategy where 
forwarding nodes are chosen such that no eavesdroppers exist in appropriately constructed secrecy zones around them and 
independent randomization is employed in each hop. Tools from percolation theory were used to establish the existence 
of a sufficient number of secure highways allowing for network connectivity. Finally, a time division approach was used 
to accomplish an end-to-end secure connection between almost all source-destination pairs. The same scaling result is also 
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obtained for the dense network scenario when 4^ = o ((logn) -2 ). We note that, in the proposed scheme, we assumed that 
nodes know whether an eavesdropper exist in a certain zone (secrecy zone) or not. An analysis of a more practical scenario, 
in which legitimate nodes have no (or more limited) eavesdropper location information, would be interesting. 

We next focused on the ergodic fading model and employed ergodic interference alignment scheme with an appropriate 
secrecy pre-coding at each user. This scheme is shown to be capable of securing each user at any SNR (depending on the 
underlying fading distributions), and hence provides performance guarantees even for the finite SNR regime compared to 
previous work. For the high SNR scenario, the scheme achieves [A — i] + secure DoFs per orthogonal dimension at each 
user. Remarkably, the results for the ergodic fading scenarios do not require eavesdropper CSI at the legitimate users, only a 
statistical knowledge is sufficient. However, this gain is obtained at the expense of large coding delays. 

Lastly, the effect of the eavesdropper collusion is analyzed. It is shown that, for the path loss model, the same per-node 
throughput scaling, i.e., fl (^^=j > is achievable under almost the same eavesdropper intensity requirement. For the fading model, 
the proposed model is shown to endure various eavesdropper collusion scenarios. In particular, when all the eavesdroppers 
collude, a secure DoF of [i — ] + is shown to be achievable. 

We list several future directions here: 1) Characterizing the full trade-off between secure throughput vs. eavesdropper node 
intensity is of definite interest. 2) We have not exploited cooperation techniques to enhance security in this work. Cooperation 
in the sense of [7] may be helpful. For example, in the extended network scenario, hierarchical cooperation might increase 
the per-node throughput for a < 3 or achieve the optimal throughput for a > 3 even with higher eavesdropper intensities. 
In addition, cooperation for secrecy strategies (see, e.g., 11271 . Il28l and references therein) may be beneficial in enhancing the 
scaling results. 3) A uniform rate per user is considered in this work. Arbitrary traffic pattern can be considered for users 
with distinct quality of service constraints. 4) Eavesdroppers are assumed to be passive (they only listen the transmissions). 
An advanced attack might include active eavesdroppers, which may jam the wireless channel. Securing information in such 
scenarios is an interesting avenue for further research. 



Appendix A 
Lemmas used in SectionHTTI 

Lemma 12 (Theorem 7.65, 4271/ ): Let d, k > 1. Consider random variables Y x and taking values in {0, 1}, for x € Z d . 
Denote Z n = {Z^ : x e Z d } as a family of independent random variables satisfying Pi{Z^ = 1} = 1 — Pr{Z£ = 0} = n. 
Also, denote Euclidean distance in H 1 as d(-, •). 

If Y = {Y x : x € is a fc-dependent family of random variables, i.e., if any two sub-families {Y x : x S .4} and 
{Y x : x' € A'} are independent whenever d(x,x') > k, \/x 6 A,Vx' € A', such that 

Pr{^ - 1} > 6, yx e Z d , 

then there exist a family of independent random variables Z^( s ' such that Y statistically dominates Z 7 '^, where tt(8) is a 
non-decreasing function ir : [0, 1] — » [0, 1] satisfying ir(5) — >• 1 as 5 —> 1. 

Proof: The proof is given in ll22l . where the authors also provide a construction of the independent model. See also ||2TI . 

■ 

Lemma 13 (Theorem 5, fi^): Consider discrete edge percolation with edge existence probability p on a square grid of size 
m x m (number of edges). For any given k > 0, partition the area into ( . Klog ^_ e t rectangles of size m x (relogm — e m ), 
where e m = o(l) as m — > oo and is chosen to have integer number of rectangles. Denote the maximal number of edge- 
disjoint left to right crossings of the ith rectangle as C l m and let N m = mirij C^. Then, Vk > and Vp G (|, 1) satisfying 
«log(6(l -pj) < -2, 3d > such that 

lim Pv{N m < dlogm} = 0. (45) 

m— >oo 

Proof: The proof is given in [2 Appendix I]. See also ll20l Theorem 4.3.9]. ■ 
Lemma 14: Consider a Poisson random variable X of parameter A. Then, 

e~ x (e\Y 

P(X >x)< 1 — '—, for x > A. (46) 

x x 

Proof: The proof follows by an application of the Chernoff bound. Please refer to [2, Appendix II] or ll20l Appendix]. ■ 
Lemma 15: Consider a Poisson random variable X of parameter A. Then, for any e g (0, 1), 



and 



lim P(X < (1 - e)A) = 0, (47) 

A— yoc 



lim P(X < (1 + e)A) = 1. (48) 

A — yoo 



Proof: The proof follows by utilizing the Chebyshev's inequality. 
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Appendix B 

R t > R FOR SOME CONSTANT R > IN (|43j AS n -> 00 

Consider that the statistics of ft^s are given by 1) q = P[9?{/ij. e }] + jP[Q{/ii je }] is a complex number with finite real and 

imaginary parts, and 2) s = P[|/ii je | 2 ] is a finite real number, Vi € JC, e 6 £. Let us further assume that I2 + X] Hi. e H* e 

i=l 

is a positive definite matrix. Focusing on the second term of (1431 ), we obtain 
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(50) 
(51) 



where (a) is due to Jensen's inequality as logdet(-) function is concave in positive definite matrices, and (b) follows from 



Hi, e H* 



JM 2 
KeKe 



KeKe 



which implies 



E 



* 191 

• |2 



\q\- s 

Thus, the second term of (l43b becomes insignificant, o(l) as n — > 00; and 3R > such that R4 > R,Vi € K, for sufficiently 
large n. Note that the assumption that I2 + jj- ^ H,* )6 H* e is a positive definite matrix holds in the limit of large n almost 



surely. (Here, due to strong law of large numbers, the sum converges to nE 



Hi. e H* 



with probability 1.) 



Appendix C 
Proof of Theorem [Tol 

The proof follows along the same lines of the proof of Theorem [6] by generalizing the secrecy zone approach to multi-level 
zones, where the area of each zone is carefully chosen to obtain a (statistically) working bound for the SNR of the colluding 
eavesdropper. 

In Fig. 5, we show the zones around a transmitting square: Zone of level k for k G {1, • • • , L} has an area of Ai k , and the 
associated distance is denoted with fi k dc with some fi k > 1 and fi k > fi k _ 1 . Note that, we take fi k as a design parameter. 
We will choose fi k differently, depending on whether a node is forwarding data over a highway or accessing to/accessed by 
a highway. Furthermore, d and fi k may depend on n, i.e., expected number of users. 

We now provide generalization of Lemma 1 to the colluding eavesdropper case. 

Lemma 16 (Secure Rate per Hop): In a communication scenario depicted in Fig. 5 (no eavesdroppers in the first zone), the 
rate 

, + 



Rtr 



1 



(ftdf 



where 



SNR TjR . = 



[log(l + SNRra ) - log(l + SNRfO] " 



P(d+l)- a c- a (V2)- 



N + P8{f t )- a d- a c- a S(a)' 

OO 

S(a) 4 53*(*-0.5)-« 



SNR £ . 



-*ed 2 j2(fhf(fh-ir a > 



k=2 



It > 



2(d + l) 



is w.h.p. securely and simultaneously achievable between any active transmitter-receiver pair if fi k is chosen such that 

^ed 2 {fi k ) 2 — > 00, as n — > 00, for k = 2, 3, • • • . 



(52) 

(53) 
(54) 

(55) 
(56) 

(57) 
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Proof: The steps of the proof are similar to that of Lemma Q] Here, we need to derive a working upper bound for the 
colluding eavesdropper SNR. In our case, secrecy is guaranteed assuming that the eavesdroppers are located on the boundary 
of each level of zones. We first bound the number of eavesdroppers at each level. We have 

A lk < (2df lk + l) 2 c 2 < 9d 2 (/ /fc ) 2 c 2 , (58) 

as d > 1 and fi k > 1. Hence, the number of eavesdroppers in layer Ik can be bounded, using the Chebyshev's inequality (see 
Lemma [TBI), by 

|^|<(l + e)A e 9c 2 d 2 (/ ; J 2 (59) 
w.h.p., for a given e > 0, as long as we choose fi k to satisfy 

X e d 2 (fi k ) 2 —> oo, as n — > oo. 

Now, we place \£* | number of eavesdroppers from layer k at distance fi k _ 1 dc for k = 2, 3, • • • . This is referred to as 
configuration £*. These colluding eavesdroppers can do maximal ratio combining (this gives the best possible SNR for them) 
to achieve the following SNR. 

SNR £ , = k ~ 2 



N 

2 



< p(i+t) r •'- ^(/■.ft/--)- 



k=2 



= SNR £ . . (60) 

■ 

Note that the challenge here is to choose fi k such that SNR^ » < oo, and at the same time to satisfy (I57t . With some 
appropriate choices of these parameters, we generalize Lemma [4] and Lemma [5] to the colluding eavesdropper case. 

Lemma 17 (Rate per Node on the Highways): If A e = 0((logn)~ 2 ), each node on the constructed highways can transmit 
to their next hop at a constant secure rate. Furthermore, if the number of nodes each highway serves is 0(y/n), each highway 
can w.h.p. carry a per-node throughput of Q {^^J ■ 
Proof: 

We show the result for A e = ((logn)" 2 ), which will imply the desired result (as lowering the eavesdropper density can 
not degrade the performance). Consequently, there exists constants A, A, and n\ such that 

A(logn)- 2 < A e < A(logn)" 2 , for n > n t , (61) 

where A < A. 

We choose each level of zones over the highways by setting 



*>-Ue*J (logn) ' (62) 

Here, 

\ e (2f h d+l) 2 c 2 < X e 9{f h ) 2 d 2 c 2 (63) 

= A e feL^ (64) 
A 

< 5, for n>n\. (65) 

Therefore, due to our percolation result, i.e., Lemma 3, each member of a given highway does not have any eavesdropper 
within their first level secrecy zone as 5 can be chosen arbitrarily small. Now, as the above choice also satisfies 

A e rf 2 {fi k ) 2 — > oo, as n — > oo, for k = 2, 3, • • • , 



we can utilize Lemma 1 to achieve a secrecy rate of 



1 

Rtr = 



(ftd) 2 



i log(l + SNR™) - X - log(l + SNR £ . 



(66) 



Now, we provide an upper bound for SNR^*. First, note that our setup results in 

2 — a 

S 



(fi k ) (ftk-i) 



9Ac 2 d 2 
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Hence, 



SNR £ , = -J^UL-D^ (67) 

< P(1 + £)9 A(lo g n)- 2 (L-l)f^ ^ 

for n > rii (68) 
0, as n ^ oo, (69) 

where the last step is due to the observation that the number of levels can be upper bounded by 

log (log n) 

L-l< (70) 
log(f) 

Therefore, there exists 712 such that for all n > U2, the rate expression satisfies Rtr > R for some constant R. The second 
claim follows from Lemma 3. 

■ 

Lemma 18 (Access Rate to Highways): Almost all source (destination) nodes can w.h.p. simultaneously transmit (receive) 
their messages to (from) highways with a secure rate of Q ((logrt)~ 3 ~ Q ), if A e = O ((logn) _ ( 2+p )) for any p > 0. 
Proof: 

We show the result for A e = 6 ((log n)~' 2+p )), which will imply the desired result (as lowering the eavesdropper density 
can not degrade the performance). Consequently, there exists constants A, A, and 77,3 such that 

A(logn)" (2+p) < A e < A(logn)~ (2+p) , for n > n 3 , (71) 

where A < A. 

At this point, we can upper bound the fraction of nodes that can not access to a highway due to an existence of an 
eavesdropper in their first secrecy zone. Following the analysis in Lemma [5] as long as we satisfy 

K(fh) 2 d 2 -> 0, as n -> 00, (72) 

almost all the nodes can access to the highways. To compute the achievable secrecy rate with Lemma 1, we need to satisfy 

X e (fl k ) 2 d 2 — ► oo, as n — > 00, for k = 2, 3, • • ■ . (73) 

Further, we can show that as long as we satisfy 

L 

Ae<i 2 J2(fi uf C/W )"° < C> as " ^ (74) 

k=2 

for some constant C, the achievable rate Rtr in Lemma [TBI scales like f2 ((log?i) _2_Q! ) as d = n"\og?i. Due to time-division 
among the legitimate nodes accessing the highways (there are w.h.p. O(logn) nodes within small squares), the secrecy rate 
per user satisfies Q ((logn)~ 3 ~ Q ). 

Here, to satisfy ( f72b . ( l73b , ( l74l i with d = k" log n, we choose the secrecy zones as 

fl k = QognyW' 1 , (75) 

with some r satisfying ^ < r < |. 

■ 

Note that, Lemma |2] that the per hop security implies the multi-hop security also holds for the colluding eavesdropper 
scenario. That is, the security obtained for configuration £* for each hop is sufficient to ensure secrecy against colluding 
eavesdroppers listening all the hops. Combining these results with the percolation result given in Lemma [3] concludes the 
proof. 
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Fig. 1, A typical multi-hop route consists of four transmission phases: 1) From source node to an entry point on the horizontal highway, 2) Across horizontal 
highway (message is carried until the desired vertical highway member), 3) Across vertical highway (message is carried until the exit node), and 4) From the 
exit node to the destination node. 



ftdc 




Fig. 2. The transmitter located at the center of the figure wishes to communicate with a receiver that is d squares away. The second square surrounding the 
transmitter is the secrecy zone, which is the region of points that are at most f e d squares away from the transmitter. Side length of each square is denoted 
by c. The time division approach is represented by the shaded squares that are allowed for transmission. It is evident from the dashed square that the time 
division requires {ft d) time slots. 
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Fig. 3. Horizontal and vertical edges in the discrete bond percolation model are denoted by dotted lines. A dotted edge is open (used for the highway 
construction) if the corresponding square is open. There are 0(n) number of edges in the random graph. 




Fig. 4. There are \S log n] number of disjoint highways within each rectangle of size (re log n — e) X y/n. The legitimate users in the slab, denoted by 
dotted lines, of the rectangle is served by the highway denoted with red bold line. 




Fig. 5. The second square surrounding the transmitter is the secrecy zone (zone of level 1), which is the region of points that are at most fi 1 d squares away 
from the transmitter. The zone of level k is denoted with distance fi k dc and has an area of A;, . 



